Tools, techniques, and procedures to write secure Dockerfiles — Docker is a familiar name by now. It has been instrumental in streamlining and improving the workflows of developers, operations, and other engineering teams. In this article, we are going to learn best practices to write Dockerfiles using BuildKit features, linters, and other tools. We’ll also touch on leveraging OPA…

24 Hours, 180 Speakers, it’s Free and Online — If you are hearing about All Day DevOps for the first time, it’s not a virtual conference due to COVID-19. It’s been there for the past 5 years and it’s virtual since the beginning. What is All Day DevOps 2020? All Day DevOps is a global community of DevOps practitioners and thought leaders offering free learning…

Intentionally vulnerable cluster environment to learn and practice Kubernetes security. — I have been working in Containers, Kubernetes and it’s security for quite sometime. I felt that there is a gap between the security and technology understanding of the Kubernetes it self. We all learnt using different goats in security world like WebGoat. I wanted to create some simple environment…

Your go to container for hacking Kubernetes Clusters — Hacker Container is a simple alpine based docker container with commonly used tools and utilities while performing security assessments for containerised and Kuberentes cluster environments. The repository and project information can be found here https://github.com/madhuakula/hacker-container madhuakula/hacker-container Container with all the list of useful tools/commands while hacking Kubernetes Clusters List of the…github.com

Hello Folks, This article is part of the series called How does the pen testing world do penetration testing. If you haven’t read the Part-1 please check the below link. How does the pen testing world do penetration testing : Part-1 When I joined Appsecco, one of the things I wanted to improve was doing penetration testing. While I have been fairly…medium.com Different standard organisations activities to perform penetration testing

Docker is everywhere! In modern day to day development and operations, we use Docker images and containers to run our applications ranging from developer laptop, raspberry pi, staging servers to including production environments. As we use modern technologies and tools, we tend to forget…

TL;DR: Woah! What an exciting ride it was :) — Hello everyone, I’m not sure how I should start writing this post. It’s been one amazing ride these last few years at Appsecco. I believe all good stories need to be told, so here’s me writing about my journey as one of the earliest core team member of an amazing…

Speaking and working experience with one of the worlds largest online community — Hello Everyone, This blog post is all about All Day DevOps, especially why you should submit your proposal to see the world class experience of presenting your research. I have added my experience as a veteran at speaking and organizing All Day…

As most of you must be aware, Docker Hub has been compromised very recently and this attack has put almost 190K users at risk. According to me, this is one of the craziest supply chain attacks in the recent history. I say so, because it is not easy to make…